madison

Zero Day

Ryan Naraine and Dancho Danchev

Anonymous leaks 90,000+ emails from compromised military contractor Booz Allen Hamilton

By | July 12, 2011, 3:12am PDT

Summary: The latest victim of the Anonymous movement is the military contractor Booz Allen Hamilton

According to a recently published torrent file, the latest victim of the Anonymous movement is the military contractor Booz Allen Hamilton. Hacktivists from the movement have published over 90,000 miitary emails and password hashes belonging to military and government representatives:

We infiltrated a server on their network that basically had no security measures in place. We were able to run our own application, which turned out to be a shell and began plundering some booty. Most shiny is probably a list of roughly 90,000 military emails and password hashes (md5, non-salted of course!).

We also added the complete sqldump, compressed ~50mb, for a good measure.We also were able to access their svn, grabbing 4gb of source code. But this was deemed insignificant and a waste of valuable space, so we merely grabbed it, and wiped it from their system. Additionally we found some related datas on different servers we got access toafter finding credentials in the Booz Allen System. We added anything which could be interesting.

Anonymous have also included a penetration testing invoice in the torrent’s release notes, emphasizing on the security practices applied to the hacked network.

Although the leak is embarrassing for Booz Allen Hamilton, the post-hack effect could easily set up the foundations for successful spear phishing attacks targeting unpublished U.S military and government emails.

The Anonymous community is thriving. Who’s next on their targets list?

TalkBack.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, malware and cybercrime incident response.

Disclosure

Dancho Danchev

More details on Dancho Danchev's current and past professional affiliations, can be found in his LinkedIn profile.

Biography

Dancho Danchev

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, and cybercrime incident response. He's been an active security blogger since 2007, and maintains a popular security blog sharing real-time threats intelligence data with the rest of the community on a daily basis. More details on Dancho Danchev's current and past professional affiliations, can be found in his LinkedIn profile. You can also follow him on Twitter

Talkback Most Recent of 5 Talkback(s)

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
Click Here

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources